$ rpki-client -vvf rpki-rsync.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/3130332e3136312e3136332e302f32342d3234203d3e20313431363136.roa File: 3130332e3136312e3136332e302f32342d3234203d3e20313431363136.roa (raw, json) Hash identifier: q3yJjhYDYiQshTjZtvHBXc0EumicuvHb+zQLM8AeoEQ= Subject key identifier: 20:62:A9:27:3E:A9:08:0E:1A:9C:77:B0:8F:C1:11:51:ED:62:9A:85 Certificate issuer: /CN=C858999BCD42FDA190703525FA3DB0036EF8DC4B Certificate serial: 53559918F6E8F2629E3447A7D0A909D90EA7E460 Authority key identifier: C8:58:99:9B:CD:42:FD:A1:90:70:35:25:FA:3D:B0:03:6E:F8:DC:4B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C858999BCD42FDA190703525FA3DB0036EF8DC4B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/3130332e3136312e3136332e302f32342d3234203d3e20313431363136.roa Signing time: Sun 03 May 2026 02:36:22 +0000 ROA not before: Sun 03 May 2026 02:31:22 +0000 ROA not after: Sun 02 May 2027 02:36:22 +0000 asID: 141616 IP address blocks: 103.161.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/C858999BCD42FDA190703525FA3DB0036EF8DC4B.crl rsync://rpki-rsync.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/C858999BCD42FDA190703525FA3DB0036EF8DC4B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C858999BCD42FDA190703525FA3DB0036EF8DC4B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:55:99:18:f6:e8:f2:62:9e:34:47:a7:d0:a9:09:d9:0e:a7:e4:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C858999BCD42FDA190703525FA3DB0036EF8DC4B Validity Not Before: May 3 02:31:22 2026 GMT Not After : May 2 02:36:22 2027 GMT Subject: CN=2062A9273EA9080E1A9C77B08FC11151ED629A85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:83:42:09:98:88:3b:df:0e:d2:55:fc:29:67: 64:a6:6a:2a:a0:b7:dc:12:a1:6b:e7:fa:b4:49:8f: b3:cc:a6:f0:d6:ef:46:75:9d:05:97:88:3a:85:39: 87:df:c2:0b:b1:78:0a:1d:4b:3b:b8:78:1e:4b:63: 1b:58:7e:98:9e:51:18:54:0c:e5:50:50:73:71:92: 67:70:b9:1e:bb:ab:50:e0:29:2a:7b:a7:e0:32:70: b5:ba:dc:65:12:24:6a:47:d3:0a:d4:c5:67:72:9a: 2a:df:27:99:7f:3b:ad:54:23:59:bd:93:ae:75:a2: 50:a0:85:9c:f7:a8:72:91:6d:bc:a3:6f:cc:df:30: f1:54:75:53:d6:07:25:43:41:fe:6d:a9:a7:de:14: 91:55:7c:22:33:cc:9a:c9:1e:eb:ca:dc:00:df:c7: 27:5f:bc:e5:e7:16:6d:08:32:d7:75:8d:aa:8f:8c: 31:c6:4f:9a:a0:ad:6c:7d:be:6d:03:b8:8f:b7:55: 52:98:d2:63:8f:8c:7c:fc:3a:38:91:f0:21:d4:63: f5:87:27:bf:c1:2a:8f:b7:b9:c5:e6:c8:b3:bc:9d: 07:e5:b2:a7:24:2c:d6:88:b3:a6:c9:f3:83:f2:a6: 85:a3:ee:5b:39:49:e7:f8:8c:fe:8c:d7:5a:f1:b5: 35:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:62:A9:27:3E:A9:08:0E:1A:9C:77:B0:8F:C1:11:51:ED:62:9A:85 X509v3 Authority Key Identifier: keyid:C8:58:99:9B:CD:42:FD:A1:90:70:35:25:FA:3D:B0:03:6E:F8:DC:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/C858999BCD42FDA190703525FA3DB0036EF8DC4B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C858999BCD42FDA190703525FA3DB0036EF8DC4B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/3130332e3136312e3136332e302f32342d3234203d3e20313431363136.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.161.163.0/24 Signature Algorithm: sha256WithRSAEncryption b9:76:cd:58:39:fe:c0:42:4b:b4:16:40:b4:b3:ca:6c:a2:dc: c7:ef:fe:76:16:04:57:6c:73:f2:66:38:8d:e3:84:80:3b:49: 29:68:09:d1:b3:fe:e5:56:fc:31:03:78:4d:89:61:8f:bb:70: 11:8a:67:8e:92:b1:77:ac:59:0b:f3:8e:a6:fb:87:6c:d4:ff: a3:28:ba:17:8a:a1:a7:ce:12:e0:34:fb:1d:bd:41:1d:e4:f3: c4:51:7b:c2:9d:c1:ce:a6:d8:e8:8c:09:80:d9:2f:4d:7f:ca: ab:03:1e:76:ce:83:d1:3c:85:ab:3f:17:2e:a9:65:49:17:53: d9:fb:f5:35:20:52:39:f8:71:35:60:26:ee:f5:ef:83:e8:3d: 7b:be:62:15:71:33:44:80:d7:84:64:34:28:92:6f:eb:45:6a: ff:0b:f7:e0:14:de:b2:61:1d:b6:ee:05:63:9d:71:8a:90:97: 81:6e:ac:c7:35:de:46:57:c2:46:09:36:94:24:d2:d0:d0:ae: ca:e8:8e:96:01:c0:91:bf:3b:d0:f0:3c:e6:83:0b:8a:26:ba: 05:09:58:b7:b7:56:ef:25:70:8a:c2:f9:06:32:53:1d:f9:3f: 59:e4:34:1f:08:b3:2c:79:f6:60:99:f0:0b:73:36:f9:00:61: 65:e8:36:97 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUU1WZGPbo8mKeNEen0KkJ2Q6n5GAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg1ODk5OUJDRDQyRkRBMTkwNzAzNTI1RkEzREIwMDM2 RUY4REM0QjAeFw0yNjA1MDMwMjMxMjJaFw0yNzA1MDIwMjM2MjJaMDMxMTAvBgNV BAMTKDIwNjJBOTI3M0VBOTA4MEUxQTlDNzdCMDhGQzExMTUxRUQ2MjlBODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcg0IJmIg73w7SVfwpZ2Smaiqg t9wSoWvn+rRJj7PMpvDW70Z1nQWXiDqFOYffwguxeAodSzu4eB5LYxtYfpieURhU DOVQUHNxkmdwuR67q1DgKSp7p+AycLW63GUSJGpH0wrUxWdymirfJ5l/O61UI1m9 k651olCghZz3qHKRbbyjb8zfMPFUdVPWByVDQf5tqafeFJFVfCIzzJrJHuvK3ADf xydfvOXnFm0IMtd1jaqPjDHGT5qgrWx9vm0DuI+3VVKY0mOPjHz8OjiR8CHUY/WH J7/BKo+3ucXmyLO8nQflsqckLNaIs6bJ84PypoWj7ls5Sef4jP6M11rxtTWTAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUIGKpJz6pCA4anHewj8ERUe1imoUwHwYDVR0j BBgwFoAUyFiZm81C/aGQcDUl+j2wA2743EswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWQwOTRkM2UtMDg5Yy00YzY4LTgwYTItNTZiNWNiZmMxMDNkLzAvQzg1ODk5OUJD RDQyRkRBMTkwNzAzNTI1RkEzREIwMDM2RUY4REM0Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DODU4OTk5QkNENDJGREExOTA3MDM1MjVGQTNEQjAwMzZFRjhE QzRCLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzVkMDk0ZDNlLTA4OWMtNGM2OC04 MGEyLTU2YjVjYmZjMTAzZC8wLzMxMzAzMzJlMzEzNjMxMmUzMTM2MzMyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzNjMxMzYucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnoaMwDQYJ KoZIhvcNAQELBQADggEBALl2zVg5/sBCS7QWQLSzymyi3Mfv/nYWBFdsc/JmOI3j hIA7SSloCdGz/uVW/DEDeE2JYY+7cBGKZ46SsXesWQvzjqb7h2zU/6MouheKoafO EuA0+x29QR3k88RRe8Kdwc6m2OiMCYDZL01/yqsDHnbOg9E8has/Fy6pZUkXU9n7 9TUgUjn4cTVgJu7174PoPXu+YhVxM0SA14RkNCiSb+tFav8L9+AU3rJhHbbuBWOd cYqQl4FurMc13kZXwkYJNpQk0tDQrsrojpYBwJG/O9DwPOaDC4omugUJWLe3Vu8l cIrC+QYyUx35P1nkNB8Isyx59mCZ8AtzNvkAYWXoNpc= -----END CERTIFICATE-----Generated at Wed May 13 02:59:24 2026 by rpki-client